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dn: cn=managerrole, dc=dom, dc=ain 
objectclass: top 
objectclass: LDAPsubentry 
objectclass: nsRole 
objectclass: nsSimpleRole 
objectclass: nsManagedRole 
cn: managgerrole 

description: Manager Role within the Company 
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dn: uid=pointyhair, ou=people, dc=dom, dc=ain 
objectclass: top 
objectclass: person 
objectclass: inetorgperson 
uid: pointyhair 
gn: pointy 
sn: hair 

nsRoleDN: cn=managerrole, dc=dom, dc=ain 
description: Pointy Haired Manager 



PIG-- S 



dn: cn= building12people, dc=dom, dc=ain 

objectclass: top 

objectclass: LDAPsubentry 

objectclass: nsRole 

objectclass: nsComplexRole 

objectclass: nsFilteredRole 

cn: building12people 

nsRoleFilter: building=12 

description: People who work in building 12 
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dn: cn=megamanagerrole, dc=dom, dc=ain 
objectclass: top 
objectclass: LDAPsubentry 
objectclass: nsRole 
objectclass: nsComplexRole 
objectclass: nsNestedRole 
cn: megamanaggerrole 
nsRoleDN: cn=managerrole, dc=dom, dc=ain 
nsRoleDN: cn=networkmanager, dc=dom, dc= 

description: Super Manager Role within the 
Company 
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dn: cn=peonrole, dc=dom, dc=ain 
objectclass: top 
objectclass: LDAPsubentry 
objectclass: nsRole 
objectclass: nsComplexRole 
objectclass: nsEnumeratedRole 
objectclass: groupofuniquenames 
cn: peonrole 

groupmember: uid=dboreham, ou=people, dc=dom, dc=ain 
groupmember: uid=merrells, ou=people, dc=dom, dc=ain 
groupmember: uid=claire, ou=people, dc=dom, dc=ain 
description: Lowest of the Low Roles within the Company 



For each entry within scope, the 
computed attribute nsRole is calculated 



The computed attribute nsRole is 
examined to see if the role is present. 



This results in a list of entries that 
possess the role. 



The list is thereafter returned to a 
client. 
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Dn:cn=messaging_server_cos, ou=people, o=acme 
objectclass: top 
objectclass: LDAPSubentry 
objectclass: cosSuperDefinition 
objectclass: cosClassicDefinition 
cosTemplate 

Dn: cn=MailServerCOS, cn=LocalConfig, o=NetscapeRoot 
cosSpecifier: mailServiceClass 
cosAttribute: mailboxquota 
cosAttribute: maysendexternalmail 



dn: cn=user, cn=MailSen/erCOS, cn=LocalConfig, o=NetscapeRoot 
objectclass: top 

objectclass: mailserveruser 

objectclass: cosTemplate 

mailboxquota: 10000000 

maysendextemalmail: TRUE 

dn: cn=guest, cn=MailServerCOS, cn=LocalConfig, o=NetscapeRoot 
objectclass: top 

objectclass: mailserveruser 

objectclass: cosTemplate 

mailboxquota: 1000000 

maysendextemalmail: FALSE 
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dn: cn=messaging_server_cos, ou=people, o=acme 
objectclass: top 
objectclass: LDAPSubentry 
objectclass: cosSuperDefinition 
objectclass: cosPointerDefinition 
cosTemplateDn: ou=people, o=acme 
cosAttribute: facsimilieTelephoneNumber default 
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dn: cn=messaging_server_cos, ou=people 
objectclass: top 
objectclass: LDAPSubentry 
objectclass: cosSuperDefinition 
objectclass: coslndirectDefinition 
coslndirectSpecifier: manager 
cosAttribute: accountingCode 



